Summary
Multiple security issues and vulnerabilities in Oracle Java SE possibly affecting mGuard device manager (mdm / FL MGUARD DM) 1.8.0 and older.
Details
Impact
Please see the various CVE entries for details.
Remediation
PHOENIX CONTACT recommends that all users of the affected product on Windows should update to at least version 1.8.0.1. The update can be performed by simply executing the installer for version 1.8.0.1 on a Windows system where the product is installed in version 1.8.0. The installer is available for download on the product page external link, in section 'Software' on the Downloads tab. For more information please refer to the document 'How to upgrade mGuard device manager' downloaded with the installer. PHOENIX CONTACT that all users of the affected product on Linux should update Java to the latest version. When using the packet source delivered by PHOENIX CONTACT on Ubuntu, this is simply done by using the software updater of the operating system.
Vulnerabilities 10
-
Unscored —
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versi…
-
Unscored —
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that is affec…
-
Unscored —
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that…
-
Unscored —
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supp…
-
Unscored —
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported vers…
-
Unscored —
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported…
-
Unscored —
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported vers…
-
Unscored —
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported vers…
-
Unscored —
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported…
-
Unscored —
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported…
Revision history
-
#4
Fix: version space, removed ia, quotation mark
-
#3
fixed product tree
-
#2
Fix: correct certvde domain, added self-reference
-
#1
Initial revision.
References
-
Phoenix Contact PSIRT
https://www.phoenixcontact.com/de-de/service-und-support/psirt
-
CERT@VDE Security Advisories for Phoenix Contact
https://certvde.com/en/advisories/vendor/phoenixcontact/
-
VDE-2017-002: PHOENIX CONTACT: mGuard device manager (mdm) multiple vulnerabilities in Java SE - HTML
https://certvde.com/en/advisories/VDE-2017-002/